PT-2025-2368 · Linux Foundation · Magma

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode protocol configuration options function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a...

CVE-2024-24418

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodepdnaddress function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24416

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeaccesspointnameie function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS...

CVE-2023-37029

Magma versions = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station or via an...

CVE-2024-24420

CVE-2024-24420 affects Magma, where a reachable assertion in the decode_linked_ti_ie function within Magma

CVE-2024-24418

The CVE-2024-24418 entry affects Linux Foundation Magma software up to version 1.8.0, with a fix in the v1.9 branch (commit 08472ba98b8321f802e95f5622fa90fec2dea486). The vulnerability is a buffer overflow in the decode_pdn_address function located at /nas/ies/PdnAddress.cpp, which can be trigger...

CVE-2023-37029

Magma CVE-2023-37029 affects Magma MME in versions

CVE-2024-24419

The Red Hat and associated feeds confirm a buffer overflow in Magma core: Linux Foundation Magma

PT-2025-1430 · Magma · Magma

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "Uplink NAS Transport" packet missing an expected MME UE S1AP ID...

CVE-2024-24424

Magma contains a vulnerability in the decode_access_point_name_ie function that can trigger a reachable assertion, leading to Denial of Service via a crafted NAS packet. Affected: Magma

CVE-2024-24423

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeesmmessagecontainer function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a...

CVE-2024-24422

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a stack overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...

CVE-2024-24422

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a stack overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via a carefully crafted NAS packet...

CVE-2024-24422

The CVE-2024-24422 vulnerability affects Linux Foundation Magma up to version 1.8.0 and was fixed in v1.9 (commit 08472ba98b8321f802e95f5622fa90fec2dea486). It is caused by a stack overflow in decode_protocol_configuration_options within /3gpp/3gpp_24.008_sm_ies.c, enabling a Denial of Service vi...

CVE-2024-24423

The CVE-2024-24423 entry describes a buffer overflow in the decode_esm_message_container function of Linux Foundation Magma

CVE-2024-24420

A reachable assertion in the decodelinkedtiie function of Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24419

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodetrafficflowtemplatepacketfilter function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

CVE-2024-39602

An external config control vulnerability exists in the nas.cgi setnas functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...